China’s Cyber Espionage Campaigns Target U.S. Critical Infrastructure and Intellectual Property A growing cyber threat from China has exposed vulnerabilities in America’s critical infrastructure and corporate networks, prompting calls for a stronger, coordinated defense strategy. State-sponsored hacking groups, including Volt Typhoon and Salt Typhoon, have infiltrated hundreds of U.S. utility systems and telecommunications providers, positioning malware to disrupt water and electrical supplies while intercepting communications from senior officials and millions of Americans. Beyond sabotage, China-backed actors continue to steal $225 billion to $600 billion in U.S. intellectual property annually, according to a 2017 report by the Commission on the Theft of American Intellectual Property. The scale of these operations underscores the limitations of the current voluntary information-sharing model between private companies and the government, which has proven insufficient in countering persistent threats. A potential solution emerged in February 2026, when Google disrupted a Chinese espionage campaign targeting 53 organizations across 42 nations. By cutting off attackers’ cloud storage access, revoking network permissions, and neutralizing their command-and-control tools, Google demonstrated how private-sector intervention could achieve in days what years of government advisories could not. This incident highlights the need for a shared responsibility framework, where tech and cybersecurity firms proactively identify and neutralize threats similar to how the banking industry combats fraud. However, legal ambiguities have deterred some companies from taking decisive action. To address this, policymakers are considering updates to cybersecurity laws, including explicit authorization for private-sector disruption operations against foreign state actors. Proposals also include establishing a specialized court, modeled after the Foreign Intelligence Surveillance Court (FISC), to oversee and approve such operations a recommendation from the Center for Strategic and International Studies (CSIS). These changes aim to empower companies to act without fear of legal repercussions while maintaining accountability.

U.S. Accuses China of Large-Scale AI Espionage Ahead of Trump’s Beijing Visit The U.S. has accused China of conducting "industrial-scale" cyber campaigns to steal American artificial intelligence (AI) secrets, escalating tensions just weeks before former President Donald Trump’s planned visit to Beijing. The allegations highlight a growing "AI arms race," with U.S. officials warning that the nation controlling AI advancements could dominate future technological and economic landscapes. According to reports, China is leveraging its vast intelligence apparatus to target U.S. companies, aiming to acquire sensitive AI research and proprietary data. The accusations come amid broader geopolitical friction, including trade disputes and military posturing in regions like the Strait of Hormuz, where U.S. forces have intercepted Iranian-linked vessels transporting sanctioned oil. The timing of the allegations just ahead of high-level diplomatic engagements underscores the strategic stakes of AI development, with implications for national security, economic competitiveness, and global influence. No specific details on the scope or methods of the alleged espionage have been disclosed.

Chinese National Extradited to U.S. Over Alleged State-Backed Cyberattacks on COVID-19 Research A Chinese national, Xu Zewei, was extradited from Milan to the U.S. on Saturday after Italian authorities arrested him in July 2025. Xu faces charges of wire fraud, aggravated identity theft, and unauthorized access to protected computers, linked to his alleged role in a Chinese state-backed hacking group. U.S. officials accuse Xu of participating in cyber intrusions between February 2020 and June 2021, including the widespread HAFNIUM (Silk Typhoon) attacks that compromised thousands of systems globally. The group, allegedly directed by China’s Ministry of State Security (MSS) and Shanghai State Security Bureau (SSSB), targeted U.S. universities, immunologists, and virologists working on COVID-19 vaccine research. Court documents claim Xu breached a Texas university’s network and reported findings to SSSB supervisors. The HAFNIUM campaign, which exploited vulnerabilities in Microsoft Exchange Servers, affected over 60,000 U.S. entities, with more than 12,700 successfully compromised, according to the FBI. Xu’s alleged co-conspirator, Zhang Yu, remains at large. Xu, who denies involvement, was detained while vacationing in Milan with his wife. His extradition drew criticism from China’s Foreign Ministry. If convicted on all charges, he faces up to 77 years in prison. The case underscores ongoing tensions over state-sponsored cyber espionage targeting critical research and infrastructure.

FBI Declares Chinese Cyber Intrusion a "Major Incident" Amid National Security Concerns The FBI has classified a suspected Chinese cyber intrusion into a U.S. government surveillance system as a "major incident," citing risks to national security. According to senior law enforcement officials and sources familiar with the matter, the breach compromised sensitive law enforcement data, prompting the FBI to brief lawmakers on the incident. The intrusion is believed to employ tactics similar to those used by Salt Typhoon, a China-linked hacking group uncovered in 2024. That campaign, one of the largest intelligence compromises in U.S. history, breached major telecommunications providers, stealing phone records of millions of Americans and FBI wiretap data. Under the 1994 Communications Assistance for Law Enforcement Act (CALEA), telecoms must maintain surveillance systems for court-ordered wiretaps systems that Salt Typhoon accessed in 2024. China has denied involvement in the operation. Former officials describe the latest breach as part of a broader pattern of undeterred Chinese cyber operations, despite high-profile exposures like Salt Typhoon and diplomatic efforts to ease tensions. A former senior cybersecurity official noted that adversaries perceive U.S. defenses as weakened, particularly amid federal workforce reductions. Sen. Mark Warner (D-Va.), vice chair of the Senate Intelligence Committee, warned that the incident reflects a persistent threat from China and other cyber adversaries, who continue to exploit vulnerabilities in U.S. systems. He criticized recent cutbacks in cybersecurity staffing at agencies like the FBI and CISA, arguing that such reductions undermine national defenses at a critical time. Former FBI cyber official Cynthia Kaiser confirmed that China has long targeted U.S. communications to track intelligence and law enforcement activities. The latest intrusion was discovered after her departure from the agency in May. The FBI and CISA have not commented on the matter. The incident was first reported by Politico.